WorkComposer employee monitoring app leaks 21 million screenshots
Take action: Companies - next time you plan to install "employee monitoring" spyware, be aware that these systems can expose you to much more risk than an employee taking half an hour of rest to browse the web during work hours.
Learn More
WorkComposer, an employee monitoring application has been found leaking over 21 million screenshots to the public internet. The surveillance tool (or even corporate spyware if you wish to put it bluntly) is designed to track employee productivity by capturing screenshots every 20 seconds.
WorkComposer left the screenshots accessible in an unsecured Amazon S3 bucket. Security researchers at Cybernews discovered the unprotected cloud storage containing millions of real-time screenshots from monitored employees' devices. These screenshots potentially expose highly sensitive information, including:
- Emails and internal communications
- Confidential business documents
- Login pages and credentials
- API keys and access tokens
- Financial information
- Intellectual property
- Personal employee information
The number of affected individuals is not disclosed.
The real-time nature of the leak made it even more dangerous, as the screenshots were continuously being added to the exposed bucket, allowing potential threat actors to monitor business operations as they occurred. Following notification from Cybernews, the company has secured access to the data, though no official comment has been provided by WorkComposer.
